Category: Mix

Tag Blending Obfuscation In Property-Based Payloads
08
Mar
2023

Tag Blending Obfuscation In Property-Based Payloads

Property-based payloads are payloads based on some particular properties of the document object and the elements. From the document object…

coin_artist – 34700 $coin Puzzle Write-Up ($20,000)
08
Mar
2023

coin_artist – 34700 $coin Puzzle Write-Up ($20,000)

Solvers: A few of us recently participated in another puzzle and managed to be victorious, collecting 34700 $coin (est $20,000…

08
Mar
2023

Git branching for small teams

A Git version control branch management strategy for small teams. Here’s a practice I use personally and encourage within my…

Axiom Scan New Spin Up Options with Whois Module - Apple Passive Recon
08
Mar
2023

Axiom Scan New Spin Up Options with Whois Module – Apple Passive Recon

Axiom Scan New Spin Up Options with Whois Module – Apple Passive Recon Source link

Press and hold keys in Obsidian Vim mode for OSX
08
Mar
2023

Press and hold keys in Obsidian Vim mode for OSX

Obsidian is my personal knowledge management system of choice. When I found out that Obsidian supports vim mode, I was…

Case Guide for Auditing Ruby on Rails – Assetnote
08
Mar
2023

Case Guide for Auditing Ruby on Rails – Assetnote

Many enterprise organizations that deal with large amounts of data that needs to be shared between employees or stakeholders often…

Remote code execution in Elixir-based Paginator
08
Mar
2023

Remote code execution in Elixir-based Paginator

Intro In August of this year I found a remote code execution vulnerability in the Elixir-based Paginator open-source project from…

Identifying Possible SSRF/LFI Insertion Points – allysonomalley.com
08
Mar
2023

Identifying Possible SSRF/LFI Insertion Points – allysonomalley.com

I’ve been very busy these past few months, leaving little time to hack. I’m very glad to be back at…

08
Mar
2023

Chapter Chapter 9 Good Habits – Alice and Bob Learn Application Security

Questions to be answered: 1. What are some of the risks of technical debt? 2. Should you post private information…

08
Mar
2023

Practical Security Recommendations for Start-ups with Limited Budgets

Hi, my name is Alex, I’ve been an IT security professional since 2007 and I’ve recently entered the start-up world…

Exploiting a Blind XSS using Burp Suite
08
Mar
2023

Exploiting a Blind XSS using Burp Suite

Exploiting a Blind XSS using Burp Suite Last weekend, I participated to the qualification phase for the “Nuit du Hack…

08
Mar
2023

Back to blogging?

I noticed that I didn’t blog for nearly two years :-/ Source link